Giters

blacklanternsecurity / MANSPIDER

Spider entire networks for juicy files sitting on SMB shares. Search filenames or file content - regex supported!

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

C$ crawling disabled

Dfte opened this issue · comments

commented

Hey!

After using this tool for at least 2 years I just realized it doesn't crawl the c$ share.
Got it, it would be insanly long but I was wondering if it wouldn't be interesting to authorize the c:\users share as it will probably contain a lot of secrets (especially c:\users\whoami\desktop).

I haven't dug into the code but I was wondering two things:

  • Is this something you'd be keen to merge ?
  • How difficult would it be for me to help you on that task ?

Thanks in advance for the answer ;)
Deft_

commented

This can be overridden via the command line:

  • shares excluded: C$, IPC$, ADMIN$, PRINT$ (override with --exclude-sharenames)

E.g.:

# enable crawling of C$ share
manspider --exclude-sharenames 'IPC$' 'ADMIN$' 'PRINT$'
commented

Ok my bad, using the --exclude-sharenames and --exclude-direnames I can crawl c:\users that way:

manspider --exclude-sharenames IPC$ ADMIN$ PRINT$ --exclude direnames Windows PerfLogs Program Files*

Thanks for the answer! :)